CVE-2016-4318: Atlassian Jira

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.

Affected products

• Atlassian Jira: up to and including 7.1.8

Published 2017-04-10. Last modified 2026-06-17.